Privacy Policy
This Privacy Policy explains what data Cosmo Copilot ("we", "us") collects when you use the platform at cosmocopilot.com, why we collect it, who we share it with, and the choices you have. By creating an account or using the platform, you agree to this policy.
1. What We Collect
| Data | When | Why |
|---|---|---|
| Email address, first/last name, company, role | Registration (email/password or Google sign-in) | Create and identify your account, plan and credits |
| Password | Email/password registration | Stored encrypted by our authentication provider (Supabase Auth) — we never see or store it in plain text |
| Google profile (name, email, profile photo) | Only if you choose "Continue with Google" | Sign-in, pre-filling your account details |
| Plan, credit balance, usage history | Ongoing, as you use modules | Enforce your plan's limits and show your usage |
| Prompts you type and AI-generated outputs (formulas, reports, chat messages) | Whenever you use an AI module | Generate your result, show your history, let you reopen and edit past work |
| Basic technical data (IP address, browser) | Automatically, on every request | Security, abuse prevention, and enforcing the Free-plan one-account-per-network limit |
2. How We Use Your Data
- To operate your account: authentication, plan enforcement, credit tracking.
- To generate the AI outputs you request (formulas, compliance checks, market intelligence, chat responses).
- To keep a history of your reports so you can reopen, edit and re-export them later.
- To detect abuse (e.g. credential sharing, automated scraping) and keep the platform secure.
- To send you account-related email (verification codes, password resets, security notices, billing).
We do not sell your data, and we do not use your prompts or formulas to train third-party AI models beyond what is described below.
3. Who We Share Data With
We use a small number of trusted infrastructure providers to operate the platform. Each only receives what it needs to perform its function:
- Supabase — our authentication and database provider. Stores your account, encrypted password/session tokens, plan, credits and history.
- Anthropic (Claude) — processes the prompts you submit to generate AI outputs (formulas, chat responses, reports). Prompts are sent for the purpose of generating your response.
- Hostinger — hosts the website and processes transactional email (verification codes, notifications) sent from our official addresses.
- Google — only if you choose "Continue with Google," to verify your identity for sign-in.
We do not share your data with advertisers or data brokers.
4. Data Retention
We retain your account and history data for as long as your account is active. Chat history is kept for your most recent conversations; older entries beyond our retention window are automatically removed. You may request full account deletion at any time (see Section 7).
5. Cookies & Local Storage
We use browser local storage and session storage to keep you signed in and to remember light preferences (e.g. theme). We do not use third-party advertising or tracking cookies.
6. Security
Account authentication is handled by Supabase Auth with encrypted password storage and verified session tokens. Every AI request is authenticated server-side before it is processed or billed. We continuously work to identify and close security gaps as we find them.
7. Your Rights
You may at any time:
- Request a copy of the personal data we hold about you.
- Request correction of inaccurate account information.
- Request deletion of your account and associated data.
- Withdraw consent for Google sign-in by disconnecting it from your Google Account settings and using email/password instead.
To exercise any of these rights, contact us at info@cosmocopilot.com.
8. Children's Privacy
Cosmo Copilot is a business platform intended for cosmetic industry professionals and is not directed at children under 16. We do not knowingly collect data from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the platform after a change constitutes acceptance.
10. Contact
For any privacy question or request, contact: info@cosmocopilot.com
See also our Terms of Service.